Lognormal Analytics

Job Description Role We are seeking a highly skilled Senior Digital Workplace Engineer to lead the technical strategy and operations for digital workplace technology, with a primary focus on Windows and macOS MDMs as an Intune expert. This role involves delivering a modern, secure, and scalable digital workplace, ensuring enterprise-grade endpoint management across multiple platforms, and mentoring a team of specialists to solve complex workplace technology : - Build a deep understanding of internal stakeholder needs and translate them into effective solutions. - Lead technical standards within the Digital Workplace in alignment with security and architecture frameworks. - Contribute to roadmap and architecture design for internal tooling across the full digital workplace lifecycle. - Identify solutions to technical problems, balancing effort and impact across stakeholders. - Collaborate with technical, finance, and procurement teams for build vs. buy recommendations. - Design and manage the integration of applications into the digital workplace experience. - Deliver and continuously improve a secure, scalable, and modern device management system. - Provide technical mentorship and foster collaborative problem-solving within the team. Core Technical Expertise Advanced Intune & Endpoint Management : - Lead the administration, configuration, and optimization of Microsoft Intune. - Develop and manage device enrollment, configuration profiles, compliance, and security baselines across Windows, macOS, iOS, and Android. - Monitor health, compliance, and security posture of endpoints. - Integrate Intune with Microsoft 365 and Azure services. Intune Automation & Scripting - Use Microsoft Graph API and PowerShell to automate tasks, deploy policies, and generate reports. - Build custom workflows to enhance endpoint management efficiency. Azure Ecosystem Integration - Strong understanding of Microsoft Entra ID (Azure AD) and its integration with Intune. - Implement Conditional Access, dynamic groups, and identity protection in endpoint security policies. Advanced Intune Features - Expertise in Windows Autopilot, Apple ADE (ABM/ASM), Android Enterprise, and Application Protection Policies (MAM). - Manage application deployments (Win32 LOB, Store) and integrate with Microsoft Defender for Device Lifecycle Management : - Design and manage BYOD strategies with Intune MDM and MAM controls. - Oversee OS updates and patching across platforms. Enterprise Browser Management - Configure security-focused browser policies via Intune for Edge, Firefox, etc., including DLP settings. Cloud Identity & Access Management - Scale identity and access management using Entra ID with Intune. - Configure SSO (SAML/OIDC) and SCIM provisioning for application & Compliance : - Apply Zero Trust principles and compliance frameworks (ISO 27001 SOC 2 Cyber Essentials) to endpoint management. - Conduct security assessments and contribute to risk remediation efforts. Architecture & Design - Design secure, scalable endpoint management solutions integrated with IDPs (Okta, Entra ID). - Translate business requirements into effective technical solutions. Desirable Additional Experience - Identity and Access Management (IAM) & Privileged Access Management (PAM) platforms, preferably Okta. - Application allowlisting (App Control, WDAC, AppLocker). - Workflow and process automation. - Issue & Project tracking tools : - 5+ years in MDM & Endpoint Management, including 5+ years as Intune Administrator. - Proven expertise in Intune administration, policy configuration, and troubleshooting. - Experience managing Windows, macOS, Android, and iOS endpoints in enterprise environments. - Strong PowerShell scripting and Microsoft Graph API skills. - Certification in MDM administration (Intune, Jamf). - Experience with MDM migration (e. g., Workspace ONE, Jamf, SCCM). - Strong communication, collaboration, and mentoring skills. (ref:hirist.tech)